$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa File: d658f22a-7382-3930-ab13-2d0787071ab4.roa (raw, json) Hash identifier: sP/yPRZWyKh1gCIkNPyKrIvgaNag6Z7wmVLfCbAGm/w= Subject key identifier: 7F:E4:17:AF:6A:79:E6:D3:4F:AD:CF:1E:F8:1D:4F:96:00:43:49:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CE9A704213C2916F868A7F78 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36183 IP address blocks: 172.226.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:70:42:13:c2:91:6f:86:8a:7f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=403560cb-5cb8-4474-95ad-cd53b6b2ab47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:f2:d4:47:7d:4f:70:43:9c:67:45:6d:7e: a3:d9:a7:4a:99:cb:2a:1a:22:dc:9c:ac:27:67:00: 66:ca:4f:80:06:a5:84:c1:92:92:83:b3:94:de:be: 3e:3b:ae:1d:c0:fe:c6:04:63:f3:b4:a4:f0:3c:3f: 83:78:17:1d:75:ae:93:36:f5:50:98:63:2b:b7:6d: a1:c7:81:80:08:b9:c9:6b:89:90:5f:e8:2e:27:47: e2:ed:f4:2f:95:e9:39:40:5a:97:a6:44:7d:a4:40: 32:ad:8a:38:d8:03:f7:85:c7:13:64:d2:7f:a2:13: 3c:13:c5:6b:03:45:60:c0:79:03:fa:f2:dd:04:00: f1:47:cb:61:33:28:a3:f0:57:8f:c8:96:08:19:6e: 3f:bb:25:c1:ac:91:23:d4:75:d7:85:35:a7:28:d3: 59:6a:39:57:34:ed:8f:9c:e5:af:2e:c7:9d:44:cf: 61:05:a4:e4:05:b1:84:c2:53:e9:42:17:15:f2:39: 2d:bc:9b:e8:ba:27:55:2f:5d:b3:7f:26:9c:1e:06: b8:83:b3:96:7b:95:f3:d2:b9:03:86:1f:6d:0e:70: 5e:e2:58:08:9b:31:53:09:cd:99:67:a7:35:4e:e4: 32:17:22:9f:2f:0b:3f:58:66:61:77:96:5a:bf:49: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E4:17:AF:6A:79:E6:D3:4F:AD:CF:1E:F8:1D:4F:96:00:43:49:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4d:48:86:f4:19:62:c0:aa:9b:7b:a8:38:19:76:55:95:7f: bb:e4:cc:36:2d:43:54:f6:2b:c0:5b:01:28:9c:4b:c3:f1:25: d7:9f:9d:c9:1d:59:dc:8a:ae:99:69:0c:02:13:e1:e0:a2:30: bd:db:4e:e6:cc:5f:ce:71:e2:95:d8:47:bf:30:ac:17:bb:40: 2e:3c:24:c7:03:66:d3:5f:57:f5:1c:ed:bd:b9:b9:13:da:b8: 7f:8e:ea:c9:8b:aa:1a:49:8e:76:30:76:20:8f:61:7d:7d:7e: 02:eb:1c:be:ba:42:b8:6a:a0:49:d3:6a:83:a1:e8:df:74:99: 31:f4:ca:02:80:3d:df:93:73:3d:9c:21:53:cc:20:27:fe:6e: b0:84:a8:f2:85:36:89:48:e7:fb:d2:11:7b:b0:d0:50:2e:1c: 91:af:ff:23:02:95:00:d0:a0:df:68:0e:b5:43:a2:3c:02:c2: 8d:99:3f:12:f4:15:56:3b:1e:b1:1f:e7:a4:8e:fd:13:de:b0: 9c:dc:1a:fd:5d:03:b0:b0:ed:9c:a9:16:05:3a:19:ac:56:80: 35:9e:e7:75:73:87:ca:86:28:30:ba:82:cf:5c:a5:2c:4b:be: 1e:98:1c:d7:ee:de:ff:b9:93:d6:2b:18:95:71:3f:66:31:98: d1:26:0b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnBCE8KRb4aKf3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NDAzNTYwY2ItNWNiOC00NDc0LTk1YWQtY2Q1M2I2YjJhYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmLy1Ed9T3BDnGdFbX6j2adKmcsqGiLcnKwn ZwBmyk+ABqWEwZKSg7OU3r4+O64dwP7GBGPztKTwPD+DeBcdda6TNvVQmGMrt22h x4GACLnJa4mQX+guJ0fi7fQvlek5QFqXpkR9pEAyrYo42AP3hccTZNJ/ohM8E8Vr A0VgwHkD+vLdBADxR8thMyij8FePyJYIGW4/uyXBrJEj1HXXhTWnKNNZajlXNO2P nOWvLsedRM9hBaTkBbGEwlPpQhcV8jktvJvouidVL12zfyacHga4g7OWe5Xz0rkD hh9tDnBe4lgImzFTCc2ZZ6c1TuQyFyKfLws/WGZhd5Zav0kQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/kF69qeebTT63PHvgdT5YAQ0lsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY1OGYyMmEtNzM4Mi0z OTMwLWFiMTMtMmQwNzg3MDcxYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5NSIb0GWLAqpt7qDgZdlWVf7vkzDYtQ1T2K8BbASicS8PxJdefnckd WdyKrplpDAIT4eCiML3bTubMX85x4pXYR78wrBe7QC48JMcDZtNfV/Uc7b25uRPa uH+O6smLqhpJjnYwdiCPYX19fgLrHL66QrhqoEnTaoOh6N90mTH0ygKAPd+Tcz2c IVPMICf+brCEqPKFNolI5/vSEXuw0FAuHJGv/yMClQDQoN9oDrVDojwCwo2ZPxL0 FVY7HrEf56SO/RPesJzcGv1dA7Cw7ZypFgU6GaxWgDWe53Vzh8qGKDC6gs9cpSxL vh6YHNfu3v+5k9YrGJVxP2YxmNEmCxI= -----END CERTIFICATE-----Generated at Sat Jun 7 15:30:09 2025 by rpki-client